26 July 2026

28 releases across 31 tracked projects, including 2 with security fixes.

One week of Release Radar, 20 stories, as published.

Data

Redis 8.6.5

SECURITY: There are security fixes in the release. · Security fixes · A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution…

Why it matters — Patch release — routine upgrade. Release notes reference security fixes. Also released on 4 other maintenance lines: 8.2.8, 7.4.10, 7.2.15, 6.2.23.

GitHub · redis/redis · 26 July 2026 · Read the original →

Data

Valkey 9.0.5

Valkey 9.0.5 - Released Tue 21 July 2026 · Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. · Security Fixes…

Why it matters — Patch release — routine upgrade. Fixes CVE-2026-56684, CVE-2026-63639 — patch promptly. Also released on 2 other maintenance lines: 8.0.10, 7.2.14.

GitHub · valkey-io/valkey · 26 July 2026 · Read the original →

IaC

OpenTofu 1.11.13

SECURITY ADVISORIES · Previous releases in the v1.11 series could be affected by several vulnerabilities · The Encrypted Client Hello implementation (which is used by OpenTofu through the go stdlib) would leak the pre-shared key identities during the handshake,…

Why it matters — Patch release — routine upgrade. Release notes reference security fixes.

GitHub · opentofu/opentofu · 26 July 2026 · Read the original →

Networking

Traefik 3.6.24

Important: Please read the migration guide. · [middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs · [logs] Remove unrelated error from nonexistent cert resolver log · [middleware] Disable Zstd support in the gzhttp wrapper…

Why it matters — Patch release — routine upgrade. Notes mention breaking changes or deprecations — read before upgrading.

GitHub · traefik/traefik · 26 July 2026 · Read the original →

Orchestration

etcd 3.7.1

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes). · macOS (Darwin) · etcd uses gcr.io/etcd-development/etcd as a primary container registry, and quay.io/coreos/etcd as secondary.

Why it matters — Patch release — routine upgrade. Notes mention breaking changes or deprecations — read before upgrading. Also released on 1 other maintenance line: 3.5.33.

GitHub · etcd-io/etcd · 26 July 2026 · Read the original →

Data

ClickHouse 26.5.6.64-stable

ClickHouse published v26.5.6.64-stable with no release notes.

Why it matters — Patch release — routine upgrade. Also released on 3 other maintenance lines: 26.4.5.143-stable, 26.6.2.81-stable, 26.3.17.56-lts.

GitHub · ClickHouse/ClickHouse · 26 July 2026 · Read the original →

Orchestration

Kubernetes 1.36.3

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

Why it matters — Patch release — routine upgrade. Also released on 1 other maintenance line: 1.34.10.

GitHub · kubernetes/kubernetes · 26 July 2026 · Read the original →

Also Shipped

Also shipped: 8 more releases

Data: Redis 8.4.5, Valkey 8.1.9, ClickHouse 26.7.1.1315-stable · Networking: Traefik 2.11.53 · Observability: Grafana 12.4.6, Grafana 12.3.9 · Orchestration: etcd 3.6.14, Kubernetes 1.35.7

GitHub · 26 July 2026

End of Life

MongoDB 8.2 reaches EOL in under 7 days

Support for MongoDB 8.2 ends on 31 July 2026 — 5 days away. Latest release on this line is 8.2.11.

Why it matters — No further security patches after this date — schedule the upgrade now if anything still runs it.

endoflife.date · 26 July 2026 · Read the original →

Data

Redis 8.8.1

SECURITY: There is a security fix in the release. · Security fixes · RedisBloom/RedisBloom#1044 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution

Why it matters — Patch release — routine upgrade. Release notes reference security fixes. Also released on 5 other maintenance lines: 8.4.5, 8.2.8, 7.4.10, 7.2.15, 6.2.23.

GitHub · redis/redis · 26 July 2026 · Read the original →

Data

DuckDB 1.5.5

This is a bug fix release for various issues discovered after we released v1.5.4. · backport the out-of-bounds security fixes made in #23100 by @Tishj in https://github.com/duckdb/duckdb/pull/23197…

Why it matters — Patch release — routine upgrade. Release notes reference security fixes.

GitHub · duckdb/duckdb · 26 July 2026 · Read the original →

Data

Valkey 9.1.1

Valkey 9.1.1 - Released Tue 21 July 2026 · Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. · Security Fixes…

Why it matters — Patch release — routine upgrade. Fixes CVE-2026-56684, CVE-2026-63639 — patch promptly. Also released on 3 other maintenance lines: 8.1.9, 8.0.10, 7.2.14.

GitHub · valkey-io/valkey · 26 July 2026 · Read the original →

IaC

OpenTofu 1.12.5

SECURITY ADVISORIES · Previous releases in the v1.12 series could be affected by several vulnerabilities · The Encrypted Client Hello implementation (which is used by OpenTofu through the go stdlib) would leak the pre-shared key identities during the handshake,…

Why it matters — Patch release — routine upgrade. Release notes reference security fixes.

GitHub · opentofu/opentofu · 26 July 2026 · Read the original →

End of Life

Docker Engine 25.0 reaches EOL in under 180 days

Support for Docker Engine 25.0 ends on 04 December 2026 — 131 days away. Latest release on this line is 25.0.16.

Why it matters — No further security patches after this date — schedule the upgrade now if anything still runs it.

endoflife.date · 26 July 2026 · Read the original →

End of Life

PostgreSQL 14 reaches EOL in under 180 days

Support for PostgreSQL 14 ends on 12 November 2026 — 109 days away. Latest release on this line is 14.23.

Why it matters — No further security patches after this date — schedule the upgrade now if anything still runs it.

endoflife.date · 26 July 2026 · Read the original →

End of Life

Python 3.10 reaches EOL in under 180 days

Support for Python 3.10 ends on 31 October 2026 — 97 days away. Latest release on this line is 3.10.20.

Why it matters — No further security patches after this date — schedule the upgrade now if anything still runs it.

endoflife.date · 26 July 2026 · Read the original →

End of Life

Kubernetes 1.34 reaches EOL in under 180 days

Support for Kubernetes 1.34 ends on 27 October 2026 — 93 days away. Latest release on this line is 1.34.10.

Why it matters — No further security patches after this date — schedule the upgrade now if anything still runs it.

endoflife.date · 26 July 2026 · Read the original →

IaC

Pulumi 3.254.0

[cli] Add pulumi logs share command for sharing logs with Pulumi #22546 · [cli] Add pulumi stack migrate to migrate a stack from another backend to the currently logged-in backend, including re-encrypting config secrets and stack state under the target secrets provider #22902…

Why it matters — Minor release — new functionality, backward compatible.

GitHub · pulumi/pulumi · 26 July 2026 · Read the original →

Observability

OpenTelemetry Collector 0.157.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.157.0 · End User Changelog · 🛑 Breaking changes 🛑…

Why it matters — Minor release — new functionality, backward compatible. Notes mention breaking changes or deprecations — read before upgrading.

GitHub · open-telemetry/opentelemetry-collector · 26 July 2026 · Read the original →

Networking

Traefik 3.7.9

Important: Please read the migration guide. · [k8s/ingress-nginx] Fix redirect with use-regex in IngressNGINX provider · [middleware] Disable Zstd support in the gzhttp wrapper · [server] Defer the CONNECT payload until the backend accepts the tunnel…

Why it matters — Patch release — routine upgrade. Notes mention breaking changes or deprecations — read before upgrading. Also released on 1 other maintenance line: 2.11.53.

GitHub · traefik/traefik · 26 July 2026 · Read the original →

Read the changelog before you bump the tag.

20 stories, every Thursday

Published here every week. Follow by RSS to get it as it lands.

Subscribe by RSS All issues

Next issue →